This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json) Hash identifier: aC/ue26yRcBItMBUhAYQXv6VJMmyn27iyrC2QuEfr0M= Subject key identifier: 85:BC:36:4E:B2:B9:2E:04:56:35:5F:C2:D5:41:52:40:9D:D8:B0:FD Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b Certificate serial: 019C432213CF4E2C479D8F64DEBFC7372646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft Manifest number: 1697 Signing time: Mon 09 Feb 2026 16:00:32 +0000 Manifest this update: Mon 09 Feb 2026 16:00:32 +0000 Manifest next update: Tue 10 Feb 2026 16:00:32 +0000 Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: fcqwhAEJYbfmBgARAW1t7Z6m73VJzERkbt7NjNFowJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:13:cf:4e:2c:47:9d:8f:64:de:bf:c7:37:26:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b Validity Not Before: Feb 9 16:00:32 2026 GMT Not After : Feb 10 16:00:32 2026 GMT Subject: CN=85bc364eb2b92e0456355fc2d54152409dd8b0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d2:a5:17:13:78:b3:6b:a2:37:68:96:e3:bf: 41:33:5f:32:da:73:8b:ec:4b:7e:2e:f7:77:fc:f6: 58:87:4a:3c:51:b8:8b:49:db:e1:50:81:86:92:2e: 67:6f:f2:7e:a6:3d:70:97:61:20:bd:46:73:7c:dc: e3:e5:0b:e4:fe:57:56:04:65:87:75:77:e9:98:98: 9e:0a:eb:da:db:38:27:e2:44:7a:7f:bd:6f:36:d3: 0a:bb:ab:45:ac:d0:1e:e1:cb:e3:0c:4f:4c:d7:64: 61:39:0d:a4:4b:3b:13:9e:72:a1:01:b9:82:a5:9b: 59:60:91:f5:89:42:97:b3:ab:7a:e7:77:d6:a1:a2: b8:cf:e9:9c:13:40:bc:1a:45:76:e3:1f:b1:34:fd: 38:b6:61:fb:c9:47:93:c4:14:11:37:f9:ac:95:a1: 4f:a8:4a:a2:ef:8d:da:f9:d0:4d:9a:6d:43:be:75: 3d:65:bd:1c:b4:4d:eb:68:ee:1b:9d:ba:cd:2b:7b: 65:4f:3f:68:dd:b9:cc:f7:d6:cd:c3:6c:80:f4:0d: 83:e0:e4:58:3d:c5:08:88:25:9b:80:57:57:8b:ec: f3:11:6f:f4:d7:2b:9f:d7:76:2a:f9:d0:5d:ec:72: 8c:ad:9f:c4:bd:4f:0b:56:c0:61:0b:a5:f0:40:b7: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:36:4E:B2:B9:2E:04:56:35:5F:C2:D5:41:52:40:9D:D8:B0:FD X509v3 Authority Key Identifier: keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:17:f5:1f:7e:d4:bf:14:95:3c:f6:0b:b6:a5:33:44:c2:5f: 17:37:e5:7e:88:2a:fd:4a:44:9f:d2:31:7b:e2:77:1f:54:f7: bf:5f:a0:4a:d4:db:94:11:f8:0d:be:47:75:90:e6:9a:ee:85: 98:54:5c:fb:e1:08:cc:38:40:92:9b:5f:f8:5e:a2:6a:12:ec: 24:93:49:0c:60:e3:97:51:5c:24:58:75:64:9d:d2:d4:c7:51: 52:f0:0c:9f:56:06:68:a0:e8:35:0b:bb:28:8d:ad:99:14:60: 8b:81:07:12:bf:84:07:c2:7f:6c:07:62:9d:b3:91:3a:6a:22: 9c:75:ae:aa:c7:28:8a:9b:c6:1a:5f:38:5b:07:3d:63:a1:88: cc:40:08:9b:ea:fe:0f:20:3e:a3:a8:56:ad:30:49:b3:ab:88: e4:76:7b:6c:9b:7b:0b:42:5a:d9:85:74:f7:52:c2:f0:2e:3e: 8a:1a:ef:b9:3c:31:85:19:81:2c:82:a6:31:9b:72:16:f7:f1: 50:7d:77:61:64:ca:5b:f7:74:10:cd:6e:1d:31:21:b1:5c:b3: 46:2a:ee:2d:10:a5:3f:b9:57:dd:28:17:73:b5:42:ad:de:ca: 40:de:fb:8a:96:7f:4e:be:75:9e:49:b1:1b:da:d6:4e:87:54: 6a:a7:d0:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhPPTixHnY9k3r/HNyZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0Zjg1OWRmODUzMWRmOTFhOTQwMDhmNGI0OTIwYTQxMjNl YjBmMGIwHhcNMjYwMjA5MTYwMDMyWhcNMjYwMjEwMTYwMDMyWjAzMTEwLwYDVQQD Eyg4NWJjMzY0ZWIyYjkyZTA0NTYzNTVmYzJkNTQxNTI0MDlkZDhiMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59KlFxN4s2uiN2iW479BM18y2nOL 7Et+Lvd3/PZYh0o8UbiLSdvhUIGGki5nb/J+pj1wl2EgvUZzfNzj5Qvk/ldWBGWH dXfpmJieCuva2zgn4kR6f71vNtMKu6tFrNAe4cvjDE9M12RhOQ2kSzsTnnKhAbmC pZtZYJH1iUKXs6t653fWoaK4z+mcE0C8GkV24x+xNP04tmH7yUeTxBQRN/mslaFP qEqi743a+dBNmm1DvnU9Zb0ctE3raO4bnbrNK3tlTz9o3bnM99bNw2yA9A2D4ORY PcUIiCWbgFdXi+zzEW/01yuf13Yq+dBd7HKMrZ/EvU8LVsBhC6XwQLdGdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW8Nk6yuS4EVjVfwtVBUkCd2LD9MB8GA1UdIwQY MBaAFJT4Wd+FMd+RqUAI9LSSCkEj6w8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kYzkyMjQtM2NkNy00MzdkLWExZGMt ZThjMzljZjY2YjNmLzEvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kYzkyMjQtM2NkNy00MzdkLWExZGMtZThjMzljZjY2YjNm LzEvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBf1H37U vxSVPPYLtqUzRMJfFzflfogq/UpEn9Ixe+J3H1T3v1+gStTblBH4Db5HdZDmmu6F mFRc++EIzDhAkptf+F6iahLsJJNJDGDjl1FcJFh1ZJ3S1MdRUvAMn1YGaKDoNQu7 KI2tmRRgi4EHEr+EB8J/bAdinbOROmoinHWuqscoipvGGl84Wwc9Y6GIzEAIm+r+ DyA+o6hWrTBJs6uI5HZ7bJt7C0Ja2YV091LC8C4+ihrvuTwxhRmBLIKmMZtyFvfx UH13YWTKW/d0EM1uHTEhsVyzRiruLRClP7lX3SgXc7VCrd7KQN77ipZ/Tr51nkmx G9rWTodUaqfQhg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:33 2026 by rpki-client